Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/hIX5tZQm6d4Ma8UjGUHafnbmosk.roa
File: hIX5tZQm6d4Ma8UjGUHafnbmosk.roa (raw, json)
Hash identifier: 4CMlLFmiyKgp7etBCYzV9ty+j2yVesxavCwsFYAuFnU=
Subject key identifier: 84:85:F9:B5:94:26:E9:DE:0C:6B:C5:23:19:41:DA:7E:76:E6:A2:C9
Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Certificate serial: 01821D36224151F3396BE8B15B40B4AB2AD0
Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/hIX5tZQm6d4Ma8UjGUHafnbmosk.roa
Signing time: Wed 20 Jul 2022 20:04:23 +0000
ROA not before: Wed 20 Jul 2022 20:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39431
IP address blocks: 176.108.109.0/24 maxlen: 24
176.108.119.0/24 maxlen: 24
193.93.17.0/24 maxlen: 24
193.93.16.0/24 maxlen: 24
193.93.16.0/23 maxlen: 24
193.93.16.0/22 maxlen: 24
193.93.19.0/24 maxlen: 24
193.93.18.0/24 maxlen: 24
193.93.18.0/23 maxlen: 24
2001:678:468::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1d:36:22:41:51:f3:39:6b:e8:b1:5b:40:b4:ab:2a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Validity
Not Before: Jul 20 20:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8485f9b59426e9de0c6bc5231941da7e76e6a2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:ee:67:81:3c:f6:21:2c:90:02:f7:94:03:
74:b6:3f:a0:4e:be:ce:fa:f2:61:d6:e1:0d:09:05:
ac:a7:be:a3:21:aa:86:f5:f8:e8:1c:8e:4b:86:1c:
16:4a:c9:9c:f6:20:14:7e:79:76:e4:08:9e:67:98:
51:2f:ea:dc:10:f5:4b:b2:f1:5d:a0:9e:a6:9e:12:
e0:03:b5:96:d6:01:dd:60:09:49:a7:70:fb:fd:30:
a2:ba:8e:77:8d:d7:b6:8f:6a:fd:28:e3:8e:cd:70:
2b:61:56:35:d4:1a:08:c3:43:2e:e6:22:e9:d7:fc:
b6:6b:6c:c3:61:d8:fe:ef:2e:15:1d:36:07:92:13:
55:47:0b:a5:77:e8:a4:61:05:76:f2:d5:90:f7:2b:
93:31:c4:9f:8d:7d:b1:f4:f2:09:8f:8a:1b:0b:15:
95:af:3a:20:5f:39:98:33:4b:0b:86:ac:2e:33:f4:
23:71:d2:a7:dd:4d:ee:29:c9:c9:2b:91:9f:c7:74:
7f:fe:a8:16:1b:e3:5e:07:ad:3d:61:85:2d:09:d5:
2e:56:7e:bc:75:57:8d:18:a3:3c:12:99:bc:e8:eb:
77:5d:70:4c:a0:f7:a9:6a:c3:a0:0c:06:a5:a8:04:
12:c1:c1:c1:93:ed:23:84:b3:78:04:62:ce:20:20:
a2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:85:F9:B5:94:26:E9:DE:0C:6B:C5:23:19:41:DA:7E:76:E6:A2:C9
X509v3 Authority Key Identifier:
keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/hIX5tZQm6d4Ma8UjGUHafnbmosk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.109.0/24
176.108.119.0/24
193.93.16.0/22
IPv6:
2001:678:468::/48
Signature Algorithm: sha256WithRSAEncryption
79:bb:0d:c6:21:e7:dc:f1:27:c8:d5:c8:b1:0c:f5:97:b1:2e:
9b:c2:c0:a4:21:d8:e7:53:a5:25:0a:45:99:ff:19:82:a5:33:
b0:7a:c5:40:02:6b:e1:9d:a7:db:22:20:87:af:50:1c:f9:6b:
67:20:ad:50:7d:14:44:7b:ce:c2:d4:c7:9c:11:09:a1:6f:04:
ec:e0:0c:c7:4d:17:82:22:29:51:98:d2:e9:fe:d2:d1:af:7e:
ed:ea:9b:a9:28:a8:94:e6:f7:4c:6b:3e:f9:e4:e7:9f:f1:0c:
bf:92:e3:df:6f:8f:7c:c1:2f:93:45:00:ef:5e:8c:b1:88:7e:
54:22:be:f3:5f:8b:ce:6e:b0:98:65:75:bc:56:22:9f:18:60:
40:d5:b9:e2:32:10:9d:34:98:26:0b:dd:80:2a:7c:d9:d3:fa:
c5:a8:78:a4:d5:0a:c4:fb:28:c8:ef:9a:9d:2a:bf:9e:ab:f2:
0c:9f:eb:15:cf:98:3a:7b:cd:b6:a0:55:3c:a7:05:6f:75:23:
b2:30:07:91:e9:58:d4:81:9a:f5:6f:db:88:e6:b4:3b:b7:b3:
59:30:37:68:8f:4e:3f:a5:49:69:29:30:94:e4:f1:1c:85:22:
78:dc:a6:9a:3f:83:87:30:bc:9a:98:7e:bf:b2:f6:6b:99:cc:
34:46:65:b1
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYIdNiJBUfM5a+ixW0C0qyrQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNWZmM2RlMTBhMzFiYmY1NzAxYzBiZGIyNmM2NTA4MDE3
ZGEyY2EwHhcNMjIwNzIwMjAwNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDg1ZjliNTk0MjZlOWRlMGM2YmM1MjMxOTQxZGE3ZTc2ZTZhMmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp7uZ4E89iEskAL3lAN0tj+gTr7O
+vJh1uENCQWsp76jIaqG9fjoHI5LhhwWSsmc9iAUfnl25AieZ5hRL+rcEPVLsvFd
oJ6mnhLgA7WW1gHdYAlJp3D7/TCiuo53jde2j2r9KOOOzXArYVY11BoIw0Mu5iLp
1/y2a2zDYdj+7y4VHTYHkhNVRwuld+ikYQV28tWQ9yuTMcSfjX2x9PIJj4obCxWV
rzogXzmYM0sLhqwuM/QjcdKn3U3uKcnJK5Gfx3R//qgWG+NeB609YYUtCdUuVn68
dVeNGKM8Epm86Ot3XXBMoPepasOgDAalqAQSwcHBk+0jhLN4BGLOICCiswIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFISF+bWUJuneDGvFIxlB2n525qLJMB8GA1UdIwQY
MBaAFJ9f894Qoxu/VwHAvbJsZQgBfaLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUt
NTcwMWQwMWMxZTg3LzEvaElYNXRaUW02ZDRNYThVakdVSGFmbmJtb3NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUtNTcwMWQwMWMxZTg3
LzEvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAsGxtAwQA
sGx3AwQCwV0QMA8EAgACMAkDBwAgAQZ4BGgwDQYJKoZIhvcNAQELBQADggEBAHm7
DcYh59zxJ8jVyLEM9ZexLpvCwKQh2OdTpSUKRZn/GYKlM7B6xUACa+Gdp9siIIev
UBz5a2cgrVB9FER7zsLUx5wRCaFvBOzgDMdNF4IiKVGY0un+0tGvfu3qm6koqJTm
90xrPvnk55/xDL+S499vj3zBL5NFAO9ejLGIflQivvNfi85usJhldbxWIp8YYEDV
ueIyEJ00mCYL3YAqfNnT+sWoeKTVCsT7KMjvmp0qv56r8gyf6xXPmDp7zbagVTyn
BW91I7IwB5HpWNSBmvVv24jmtDu3s1kwN2iPTj+lSWkpMJTk8RyFInjcppo/g4cw
vJqYfr+y9muZzDRGZbE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:54 2024 by rpki-client on console-ams.rpki-client.org